General

  • Target

    7795339128f6ba2a7bec145fb1e5a550_JaffaCakes118

  • Size

    72KB

  • MD5

    7795339128f6ba2a7bec145fb1e5a550

  • SHA1

    2d04646d01f477db11d4b24d05d346465d970803

  • SHA256

    45a6212324bb3ba98f61bb334fc78ff978e166517137bc2efa2244e468240b01

  • SHA512

    9c0c08bdc8a3093e9439cb7059988434f7058f8fa47c70bcf352335fecff395f52c4ab15848614ecd4ff91869acfd335f67bbb5688e107fa19ca16513940fb50

  • SSDEEP

    1536:Iy03XdfgnvpAOgnTJZEA93xMb+KR0Nc8QsJq39:703NfgRgnl93xe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

windows/shell_reverse_tcp

C2

192.168.1.77:4444

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7795339128f6ba2a7bec145fb1e5a550_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections